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1 1 . (Currently Amended) A method of using a virtual machine monitor and an operating 

2 system on computer hardware in a computer, the method comprising: 

3 booting the operating system on the computer hardware such that the operating system 

4 has direct control of at least a portion of the computer hardware including a central processing 

5 unit (CPU), a physical memory, and an input/output (I/O ) device; 

6 interposing the virtual machine monitor between the computer hardware and the 



7 operating system at runtime , wherein runtime includes a period of execution in the computer 

8 after booting and before shutdown of the computer , wherein the interposing occurs after booting 

9 of the computer, and wherein interposing the virtual machine monitor gives the virtual machine 

10 monitor direct control of the at least a portion of the computer hardware such that the operating 

1 1 system no longer has direct control of the at least a portion of the computer hardware ; and 

12 booting the operating system on the computer hardware before interposing the virtual 

13 machine monitor at runtime 

14 devirtualizing the at least a portion of the computer hardware at runtime after the virtual 

15 machine monitor has been interposed at runtime, wherein devirtualizing the at least a portion of 

16 the computer hardware comprises stopping the virtual machine monitor such that the operating 

17 system resumes having direct control of the at least a portion of the computer hardware . 

1 2.-4. (Cancelled) 

1 5. (Currently Amended) The method of claim 1, wherein the computer hardware includes a 

2 CPU; and wherein the virtual machine monitor is interposed on the CPU. 

1 6. (Currently Amended) The method of claim 5, wherein the computer hardware further 

2 includes memory, and the virtual machine monitor and the operating system each include CPU 

3 interrupt handlers; and wherein interposing the virtual machine monitor on the CPU includes: 

4 causing privileged instructions to trap to the virtual machine monitor, and 

5 redirecting interrupts to the corresponding virtual machine monitor CPU interrupt 

6 handlers instead of to the operating system CPU interrupt handlers. 
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1 7. (Original) The method of claim 6, wherein the privileged instructions are caused to trap 

2 to the virtual machine monitor by causing the operating system to run at a reduced privilege 

3 level; and wherein interposing the virtual machine monitor on the CPU further includes returning 

4 control to the operating system at the reduced privilege level. 

1 8. (Previously Presented) The method of claim 6, wherein the privileged instructions are 

2 caused to trap to the virtual machine monitor by using a kernel module of the operating system to 

3 reduce a privilege level of the operating system from a higher privilege level. 

1 9. (Previously Presented) The method of claim 6, wherein interposing the virtual machine 

2 monitor on the CPU further includes disabling physical memory access by the operating system. 

1 10. (Currently Amended) The method of claim 6, wherein interposing the virtual machine 

2 monitor on the CPU further includes loading the virtual machine monitor into the physical 

3 memory. 

1 11. (Previously Presented) The method of claim 10, further comprising using a kernel 

2 module of the operating system to allocate memory within the operating system, pin the 

3 allocated memory, and load the virtual machine monitor into the pinned memory. 

1 12. (Currently Amended) The method of claim 5, wherein the computer hardware includes 

2 memory; and wherein the virtual machine monitor is also interposed on the physical memory. 

1 13. (Currently Amended) The method of claim 12, wherein interposing the virtual machine 

2 monitor on the physical memory includes partitioning the physical memory to provide partitions, 

3 and giving the virtual machine monitor access to at least one of the partitions. 

1 14. (Currently Amended) The method of claim 12, wherein interposing the virtual machine 

2 monitor on the physical memory includes using a kernel module of the operating system to 

3 allocate a block of the physical memory, pin the block to prevent the operating system from 

4 using the block, and allocate the pinned block to the virtual machine monitor. 



3 



Appln. Serial No. 10/676,557 
Unofficial Amendment 

1 15. (Currently Amended) The method of claim 12, wherein interposing the virtual machine 

2 monitor on the physical memory includes commencing using the virtual machine monitor at 

3 runtime to manage memory translation. 

1 16. (Currently Amended) The method of claim 5, wherein the computer hardware includes an 

2 I/O device, and wherein the virtual machine monitor is also interposed on the I/O device. 

1 17. (Previously Presented) The method of claim 16, wherein the operating system includes a 

2 dual-mode driver that performs direct hardware control in a first mode and communicates with a 

3 device driver of the virtual machine monitor in a second mode; and wherein interposing the 

4 virtual machine monitor on the I/O device includes: 

5 setting the dual-mode driver to the second mode; and 

6 redirecting I/O interrupts to interrupt handlers in the virtual machine monitor instead of to 

7 interrupt handlers in the operating system. 

1 18. (Previously Presented) The method of claim 16, wherein interposing the virtual machine 

2 monitor on the I/O device includes commencing I/O emulation of the I/O device at runtime. 



3 system each include CPU interrupt handlers; and wherein devirtualizing the ITCPUll at least a 

4 portion of the computer hardware includes redirecting interrupts to the corresponding operating 

5 system CPU interrupt handlers instead of to the virtual machine monitor CPU interrupt handlers. 

1 22. (Currently Amended) The method of claim 21, wherein devirtualizing the ITCPUI1 at least 

2 a portion of the computer hardware further includes restoring a privilege level of the operating 

3 system from a less privileged mode to a more privileged mode. 



1 19.-20. (Cancelled) 




m [[20]] 1, wherein the virtualized computer 
-the virtual machine monitor and the operating 
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1 23. (Currently Amended) The method of claim 21, wherein devirtualizing the ITCPUll at least 

2 a portion of the computer hardware further includes enabling physical memory access of the 

3 physical memory by the operating system. 

1 24. (Currently Amended) The method of claim 21, wherein devirtualizing the ITCPUll at least 

2 a portion of the computer hardware further includes unloading the virtual machine monitor from 

3 the physical memory. 

1 25. (Currently Amended) The method of claim [[19]]1, wherein the virtualized computer 

2 hardware includes memory; and wherein the physical memory is devirtualized at runtime. 

1 26.-27. (Cancelled) 

1 28. (Currently Amended) The method of claim [[ 1 9]]1, wherein the virtualized computer 

2 hardware includes an I/O device, and wherein the I/O device is devirtualized at runtime. 

1 29. (Currently Amended) The method of claim [[28]]1, wherein the operating system 

2 includes a dual-mode driver that performs direct hardware control in a first mode and 

3 communicates with a device driver of the virtual machine monitor in a second mode; and 

4 wherein devirtualizing the I/O device at least a portion of the computer hardware includes: 

5 setting the dual-mode driver to the first mode from the second mode, and 

6 redirecting I/O interrupts to handlers in the operating system instead of handlers in the 

7 virtual machine monitor. 

1 30. (Cancelled) 
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1 31. (Currently Amended) A computer comprising hardware, the hardware including a central 

2 processing unit (CPU), a physical memory, and an input/output (I/O) device, the physical 

3 memory encoded with an operating system, a virtual machine monitor, and code for interposing 

4 the virtual machine monitor between the operating system and the hardware at runtime, wherein 

5 runtime includes a period of execution in the computer after booting and before shutdown of the 

6 computer, and wherein the inteiposing occurs after booting of the computer, 

7 wherein the operating system is to be booted [[in]]on the hardware such that the operating 

8 system has direct control of at least a portion of the hardware computer before interposing the 

9 virtual machine monitor , wherein interposing the virtual machine monitor gives the virtual 

10 machine monitor direct control of the at least a portion of the hardware such that the operating 

11 system no longer has direct control of the at least a portion of the hardware, and 

12 wherein the physical memory is further encoded with code for devirtualizing the at least a 

13 portion of the hardware at runtime after the virtual machine monitor has been interposed at 

14 runtime, wherein devirtualizing the at least a portion of the hardware comprises stopping the 

15 virtual machine monitor such that the operating system resumes having direct control of the at 

16 least a portion of the hardware . 

1 32. (Currently Amended) The computer of claim 31, wherein the hardware further includes a 

2 CPU, wherein the virtual machine monitor is interposed on the CPU at runtime, and the virtual 

3 machine monitor and the operating system each include CPU interrupt handlers; and wherein the 

4 interposing code is to cause privileged instructions to trap to the virtual machine monitor, and to 

5 redirect interrupts and traps to the corresponding virtual machine monitor CPU interrupt handlers 

6 instead of to the operating system CPU interrupt handlers. 

1 33. (Previously Presented) The computer of claim 32, wherein the interposing code is to 

2 cause privileged instructions to trap to the virtual machine monitor by causing the operating 

3 system to run at a reduced privilege level from a higher privilege level; and wherein the 

4 interposing code is to reduce a privilege level of the operating system after redirecting the 

5 interrupts, and to return control to the operating system at the reduced privilege level. 
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1 34. (Previously Presented) The computer of claim 32, wherein the interposing code includes 

2 a kernel module of the operating system for reducing a privilege level of the operating system 

3 from a higher privilege level, whereby the privileged instructions trap to the virtual machine 

4 monitor. 

1 35. (Currently Amended) The computer of claim 32, wherein the interposing code is to 

2 disable physical memory access to the physical memory by the operating system. 

1 36. (Currently Amended) The computer of claim 31, wherein the interposing code includes a 

2 kernel module of the operating system for allocating a block of the physical memory, pinning the 

3 block to prevent the operating system from using the block, and allocating the pinned block to 

4 the virtual machine monitor , whereby the virtual machine monitor is interposed on the memory 

5 at runtime . 

1 37. (Currently Amended) The computer claim 31, wherein the interposing code is to 

2 commence using the virtual machine monitor at runtime to manage memory translation , whereby 

3 the virtual machine monitor is interposed on the memory at runtime . 

1 38. (Currently Amended) The computer of claim 3 1 , wherein the hardware further includes 

2 an I/O device; and wherein the interposing code includes an operating system dual-mode driver 

3 to perform direct hardware control in a first mode and to communicate with a device driver of 

4 the virtual machine monitor in a second mode; and wherein the interposing code is to set the 

5 dual-mode driver to the second mode, and to direct I/O interrupts to interrupt handlers in the 

6 virtual machine monitor instead of to interrupt handlers in the operating system , whereby the 

7 virtual machine monitor is interposed on the I/O device at runtime . 
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1 39. (Currently Amended) The computer of claim 31, wherein the hardware further includes 

2 an I/O device; and wherein the operating system includes a dual-mode driver to perform direct 

3 hardware control in a first mode and to communicate with a device driver of the virtual machine 

4 monitor in a second mode; and wherein the interposing code is to set the dual-mode driver to the 

5 second mode, and to redirect I/O interrupts to interrupt handlers in the virtual machine monitor 

6 instead of to interrupt handlers in the operating system , whereby the virtual machine monitor is 

7 interposed on the I/O device . 

1 40. (Currently Amended) The computer of claim 31, wherein the hardware further includes 

2 an I/O device; and wherein the interposing code is to commence I/O emulation of the I/O device 

3 at runtime , whereby the virtual machine monitor is interposed on the I/O device at runtime . 

1 41.-42. (Cancelled) 

1 43. (Currently Amended) The computer of claim [[42]] 31, wherein the memory is further 

2 encoded with an operating system including includes interrupt handlers; wherein the virtual 

3 machine monitor includes interrupt handlers; and wherein the devirtualizing code is to redirect 

4 interrupts to the corresponding interrupt handlers of the operating system instead of to the 

5 interrupt handlers of the virtual machine monitor. 

1 44. (Currently Amended) The computer of claim 43, wherein the devirtualizing code is to 

2 restore a_privilege level of the operating system from a lower privilege level to a higher privilege 

3 level. 

1 45. (Currently Amended) The computer of claim 43, wherein the devirtualizing code is to 

2 enable physical memory access of the physical memory by the operating system. 



1 46. (Currently Amended) The computer of claim [[41]]31, wherein the devirtualizing code is 

2 to devirtualize the physical memory at runtime. 
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1 47. (Previously Presented) The computer of claim 46, wherein the virtual machine monitor is 

2 to allocate memory from an operating system to the virtual machine monitor; and wherein the 

3 devirtualizing code is to return the allocated memory to the operating system. 

1 48. (Cancelled) 

1 49. (Currently Amended) The computer of claim 17411131, wherein the hardware includes an 

2 I/O device, wherein the virtual machine monitor is to virtualize the I/O device; and wherein the 

3 devirtualizing code is to devirtualize the I/O device at runtime. 

1 50. (Currently Amended) The computer of claim 49, wherein the memory is further encoded 

2 with an operating system including includes dual-mode drivers to perform direct hardware 

3 control in a first mode and communicate with device drivers of the virtual machine monitor in a 

4 second mode; and wherein the devirtualizing code is to set the dual-mode drivers to the first 

5 mode from the second mode, and to redirect I/O interrupts to handlers in the operating system 

6 instead of to handlers in the virtual machine monitor. 

1 51. (Previously Presented) The computer of claim 49, wherein the devirtualizing code is to 

2 cease emulation of the I/O device at runtime. 
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1 52. (Currently Amended) An article for use with an operating system on computer hardware, 

2 the article comprising a computer-readable storage medium storing software that when executed 

3 by [[the]]a computer causes the computer to: 

4 boot the operating system on the computer hardware such that the operating system has 

5 direct control of at least a portion of the computer hardware including a central processing unit 

6 (CPU), a physical memory, and an input/output (I/O) device; 

7 virtualize at least a portion of the computer hardware at runtime by providing interpose a 

8 virtual machine monitor between the operating system and the computer hardware at runtime , 



9 wherein runtime includes a period of execution in the computer after booting and before 

10 shutdown of the computer, wherein the virtualizin g interposing occurs after booting of the 

1 1 compute r, and wherein interposing the virtual machine monitor gives the virtual machine 

12 monitor direct control of the at least a portion of the computer hardware such that the operating 

13 system no longer has direct control of the at least a portion of the computer hardware; and 



14 devirtualize the at least a portion of the computer hardware at runtime after the virtual 

15 machine monitor has been interposed at runtime, wherein devirtualizing the at least a portion of 

16 the computer hardware comprises stopping the virtual machine monitor such that the operating 

17 system resumes having direct control of the at least a portion of the computer hardware. 

18 and loading of the operating system, and 

19 wherein the operating system is to be booted in the computer before virtualizing the at 

20 least a portion of the computer hardware at runtime. 

1 53. (Currently Amended) The article of claim 52, wherein the computer hardware further 

2 includes a CPU, and wherein the virtual machine monitor and the operating system each include 

3 CPU interrupt handlers; and wherein the software is executable to cause privileged instructions 

4 to trap to the virtual machine monitor, and to cause interrupts and traps to be redirected to the 

5 corresponding virtual machine monitor interrupt handlers instead of to the operating system 

6 interrupt handlers. 
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1 54. (Previously Presented) The article of claim 53, wherein the software is executable to 

2 cause the privileged instructions to trap to the virtual machine monitor by reducing a privilege 

3 level of the operating system from a higher privilege level, and wherein the software causes 

4 control to be returned to the operating system at the reduced privilege level. 

1 55. (Currently Amended) The article of claim 53, wherein the software is executable to cause 

2 physical memory access by the physical memory by the operating system to be disabled. 

1 56. (Currently Amended) The article of claim 52, wherein the computer hardware includes 

2 memory, and wherein the virtual machine monitor is for causing a kernel module of the 

3 operating system to allocate a block of the physical memory, pin the block to prevent the 

4 operating system from using the block, and allocate the pinned block to the virtual machine 

5 monitor. 

1 57. (Cancelled) 

1 58. (Currently Amended) The article of claim 52, wherein the computer hardware further 

2 includes an I/O device; and wherein the software includes an operating system dual-mode driver 

3 to perform direct hardware control in a first mode and communicate with a corresponding device 

4 driver of a virtual machine monitor in a second mode; and wherein the dual-mode driver is set to 

5 the second mode when the at least the portion of the computer hardware is virtualized, and 

6 wherein I/O interrupts are redirected to interrupt handlers in the virtual machine monitor instead 

7 of interrupt handlers in the operating system. 

1 59. (Currently Amended) The article of claim 52, wherein the computer hardware further 

2 includes an I/O device; and wherein the operating system includes a dual-mode driver to perform 

3 direct hardware control in a first mode and communicate with a device driver of the virtual 

4 machine monitor in a second mode; and wherein the dual-mode driver is set to the second mode 

5 when the at least the portion of the computer hardware is virtualized, and wherein I/O interrupts 

6 are redirected from interrupt handlers in the operating system to interrupt handlers in the virtual 

7 machine monitor. 
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1 60. (Currently Amended) The article of claim 52, wherein the computer hardware further 

2 includes an I/O device; and wherein the software is executable to cause I/O emulation of the I/O 

3 device to commence at runtime. 

1 61.-62. (Cancelled) 

1 63. (Currently Amended) The article of claim IT621152, wherein the virtualized hardware 

2 includes a CPU; and wherein the software causes the CPU to be devirtualized at runtime. 

1 64. (Currently Amended) The article of claim 63, wherein the virtualized hardware further 

2 includes memory, and wherein the memory is further encoded with the operating system 

3 including includes first interrupt handlers; wherein the software includes second interrupt 

4 handlers; and wherein the software is executable to eaus edevirtualize by causing interrupts to be 

5 redirected to the corresponding first interrupt handlers instead of to the second interrupt handlers. 

1 65. (Currently Amended) The article of claim 64, wherein the software is executable to 

2 eaus edevirtualize by causing a privilege level of the operating system to be restored from a lower 

3 privilege level to a higher privilege level. 

1 66. (Currently Amended) The article of claim 64, wherein the software is executable to 

2 devirtualize by causing cause physical memory access of the physical memory by the operating 

3 system to be enabled. 

1 67. (Currently Amended) The article of claim [[62]]52, wherein the virtualized hardware 

2 includes a memory, and wherein the software is executable to cause the physical memory to be 

3 devirtualized at runtime. 
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1 68. (Currently Amended) The article of claim 67, wherein if a part of the physical memory 

2 was allocated from [[an]]the operating system to the virtual machine monitor prior to the runtime 

3 devirtualization, the software is executable to cause the allocated physical memory to be returned 

4 to the operating system as part of the runtime devirtualization. 

1 69. (Currently Amended) The article of claim 67, wherein the software is executable to cause 

2 the physical memory to be remapped and wherein the software allows [[an]] the operating system 

3 to manage address translation with respect to the devirtualized physical memory. 

1 70. (Currently Amended) The article of claim r[62]]52, wherein the virtualized hardware 

2 includes an I/O device; and wherein the software is executable to cause the I/O device to be 

3 devirtualized at runtime. 

1 71. (Currently Amended) The article of claim 70, wherein the virtualized hardware further 

2 includes a memory, and wherein the memory is further encoded with the operating system 

3 including includes dual-mode drivers that perform direct hardware control in a first mode and 

4 communicate with virtual device drivers in a second mode; and wherein the software is 

5 executable to eattse devirtualize by causing the dual-mode drivers to be set to the first mode. 

1 72. (Currently Amended) The article of claim 70, wherein the software is executable to cause 

2 devirtualize by causing emulation of the I/O device to cease at runtime. 

1 73.-74. (Cancelled) 
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